HNHacker News
TopNewBestAskShowJobs

jamespwilliams

2,548 karma · joined August 15, 2020

https://github.com/jamespwilliams

Submissions != endorsements

submissionscomments
jamespwilliams··on Promotion of alternative social platforms policy
Yes they are and they explicitly say as much:

> we will remove any free promotion of prohibited 3rd-party social media platforms, such as linking out (i.e. using URLs) to any of the below platforms on Twitter

Your quote is referring to cross-posting from other sites to Twitter, not linking.

jamespwilliams··on Lionel Messi Is Impossible (2014)
Reminds me of https://twitter.com/xgphilosophy/status/1604202292139491328 that I saw this morning
jamespwilliams··on I almost failed to search a 37 GB text file in under 1 millisecond
Perhaps pushing the definition of a *nix command slightly, but I’d be interested in the performance of https://sgrep.sourceforge.net/
jamespwilliams··on Ask HN: What are some of the best podcasts for developers?
Go Time is good (if you like Go, obviously)

(I’d also recommend Security Cryptography Whatever and Signals & Threads, but they’ve already been mentioned)

jamespwilliams··on Systemd.timer, an Alternative to Cron
* Built in locking (so you don't need to worry about two instances of your cron running at the same time)

* Built in functionality for telling when the cron last ran, and whether it was successful or not (so you can do alerting)

* Ability to specify human-readable schedules

* Built-in feature for randomising cron start time to avoid stampeding

jamespwilliams··on Linux Certificate Authority root stores have a too simple view of 'trust'
My mistake, I misread “Removal/distrust” in the timeline of https://wiki.mozilla.org/CA/Symantec_Issues as meaning removal from the trust store.

I can’t edit my comment now, but hopefully your correction here gets upvoted and is visible to people.

jamespwilliams··on Linux Certificate Authority root stores have a too simple view of 'trust'
See https://news.ycombinator.com/item?id=33877290
jamespwilliams··on Linux Certificate Authority root stores have a too simple view of 'trust'
Even when Mozilla does fully remove stuff from their root store, in some cases it has taken distros a year+ to ship the updated version

Not to mention stuff like this: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+b..., where Ubuntu just unilaterally reverted Mozilla’s removal of a cert in their package, because it was breaking nuget… Note that this was early 2021 — Mozilla removed Symantec from their trust store in October 2018!

In general it just seems like a bit of a mess.

jamespwilliams··on ChatGPT vs. a Cryptic Crossword
I agree, and say roughly this in the article:

> I guess cryptic crosswords fall into the (surprisingly small) category of things that ChatGPT just isn’t very good at!

jamespwilliams··on ChatGPT vs. a Cryptic Crossword
This isn’t true - this crossword was published last week, and ChatGPT’s knowledge of the world ends in 2021.
jamespwilliams··on Building a Virtual Machine Inside ChatGPT
How do you explain how it knows the output of the first Python expression in this article, if not by understanding it?

Let alone the fact that’s it’s running in a simulated virtual machine, and the other examples presented in this article, which add layers and layers of complexity on top of that.

jamespwilliams··on Building a Virtual Machine Inside ChatGPT
> I just cracked the imaginary virtual machine's root password using John The Ripper

https://twitter.com/nejk0/status/1599186423760183296

jamespwilliams··on Building a Virtual Machine Inside ChatGPT
I find it hard to believe that it’s seen that exact code online along with the output. It’s quite an unusual expression.

Also, it does not matter that the code takes 30 seconds to execute — I’m not claiming that the model is executing the code. I’m suggesting that the model could be understanding what the code is meant to do, and producing the output from that understanding. The code’s inefficiency is irrelevant in that process.

jamespwilliams··on Building a Virtual Machine Inside ChatGPT
The IP for bbc.com included in the output is in a netblock owned by the BBC: https://ipinfo.io/AS2818/212.58.224.0/19-212.58.224.0/25
jamespwilliams··on Building a Virtual Machine Inside ChatGPT
The fact that it’s able to understand the Python code and come to the correct answer is pretty astonishing in itself, let alone the rest.

The progress in this area is insane. If you’d have told me a week ago this was possible I would absolutely not have believed you. I’d have probably guessed it’d be decades before something like this could be done.

jamespwilliams··on Extremely Linear Git History
If you squash you decrease the granularity of your git history, though.
jamespwilliams··on Stupid Security Things (2017)
Obligatory mention of https://twitter.com/virginmedia/status/1162756227132198914 (in 2019!!)
jamespwilliams··on .ai
As far as I can see (Chrome’s cert viewer), the cert is for *.cctld.uz, cctld.uz (which doesn’t match uz alone). Do you see different names in the cert?
jamespwilliams··on Shortest URLs on the Internet
Oh interesting, thanks! I fixed the script and ran the TLD list through again, in case this meant I missed some, but none of the affected TLDs have A records. I'll update my post to mention your comment.
jamespwilliams··on A few months ago, a complete stranger gave me $10k (2021)
You might find https://www.givedirectly.org interesting
jamespwilliams··on Tell HN: Google Cloud suspended our production projects at 1am on Saturday
The same is true of DigitalOcean, fwiw. Shutting down machines used in production with no notice, outside working hours. I don’t know why these companies don’t care - they’re massively shooting themselves in their feet. Incidents like this turn customers off for life.
jamespwilliams··on Twilio incident: What Signal users need to know
The attack Twilio suffered is almost identical to the recent attack against Cloudflare: https://blog.cloudflare.com/2022-07-sms-phishing-attacks/ (even down the wording of the text messages, which are nearly identical). Cloudflare’s use of security keys prevented the attackers getting access to any accounts in that case.

These attacks are sophisticated and are capable of bypassing TOTP or mobile-app-based MFA. If this is widespread, I’d be surprised if we didn’t see a massive influx of breaches soon. The vast majority of companies are not well defended against this.

jamespwilliams··on Building a Recursive DNS Resolver
> 13 root nameservers exist

There are 13 root nameserver IPs, but there are actually about 1500 root nameservers. Anycast addressing is used so that multiple root nameservers can use the same IP (requests to a root nameserver IP will be routed to the “nearest” nameserver using that IP).

jamespwilliams··on Perl is still relevant
> i have stuff literally written a deacade+ ago, still working without issues

Maybe this works if you run your Perl in the exact same environment the whole time, or if you're writing stuff on a very small scale and don't need to use many CPAN modules.

But for large applications, you'll be using CPAN modules heavily. And you'll need to run your Perl in new environments - if for no other reason, because you'll need to move to new operating system versions to pick up security updates.

That's where the problems start. If you're using a reasonable number of CPAN modules, this inevitably breaks some of them. And because the Perl ecosystem is essentially dead, those third-party modules are usually abandoned.

jamespwilliams··on Hacker News was down
I read https://twitter.com/eastdakota/status/1545259828972584961, came to HN to see if there was any discussion, then saw HN was down… spooky
jamespwilliams··on SpaceVim 2.0
https://github.com/jamespwilliams/neovim-go-nix-develop

The above is my attempt to create a minimal Neovim configuration that uses treesitter and nvim-lsp (albeit only for Go).

It uses Nix, so if you have Nix installed you can immediately try the configuration out in a self-contained development shell.

It’s too minimal for everyday use, but could be of inspiration.

jamespwilliams··on Start all of your commands with a comma (2009)
I think it was originally developed and maintained by Shopify, but was then handed off to the nix community
jamespwilliams··on Start all of your commands with a comma (2009)
This brought https://github.com/Shopify/comma to mind
jamespwilliams··on BBC apologises after 'Manchester United are rubbish' appears on screen
> An official BBC statement added: "There was a technical glitch during training with our test ticker, which rolled over to live programming for a few seconds.
jamespwilliams··on An AI system for solving crossword puzzles that outperforms the best humans
For cryptic crosswords I’ve found https://www.crosswordgenius.com/ impressive (once you get past the kind of clunky UI)
← PreviousPage 2 of 5Next →